Getting started

From sign-up to your first lookup in minutes.

IpQuery.Info is a single HTTPS endpoint. There is no SDK to install — if you can make an HTTP request, you can enrich an IP address with geolocation, network, and threat intelligence.

1. Create an account

Start a 15 day free trial — no credit card required. A default API key is created for you automatically.

2. Get your API key

Open the API Keys page to copy your key, create additional keys, or lock a key down with the Record-Only option for safe client-side use.

3. Make a request

Call the endpoint with your key. Pass an ip, a comma-separated ipList, a POST body, or omit selectors to look up the caller.

Try it live

Look up any IP address right here — this runs the same API with a shared, rate-limited demo key. No account needed.

IP lookup

Look up any IP address

Enter any IPv4 or IPv6 address to see its full geolocation, network, and threat intelligence — the same data the API returns. No account required.

Enter an IP address above to see full geolocation, network, and threat intelligence.

Free, rate-limited demo — no account needed. For higher limits, batch lookups, and your own API key, read the docs or start a free trial.

Your first request

Query a specific address from your back end (keeps your key off the client):

curl "https://ipquery.info/api?apiKey=YOUR_API_KEY&ip=8.8.8.8"

Or look up the visitor currently calling the endpoint — useful directly from the browser when combined with the Record-Only key option:

curl "https://ipquery.info/api?apiKey=YOUR_API_KEY"

Reading the response

You get back a JSON array with one object per queried IP. A typical result looks like this:

[
  {
    "query_ip_address": "8.8.8.8",
    "city": "Mountain View",
    "country": "United States",
    "country_iso_code": "US",
    "subdivision": "California",
    "time_zone": "America/Los_Angeles",
    "currency": "USD",
    "gdpr_required": false,
    "asn": "AS15169",
    "asn_name": "Google LLC",
    "is_vpn": false,
    "is_proxy": false,
    "is_cloud": true,
    "usage_type": "hosting",
    "risk_score": 35,
    "risk_level": "medium"
  }
]

See the full API documentation for every field, batch lookups, and error codes.

Risk score & reverse DNS

On Basic and above, every result includes a packaged risk_score (0–100) and a risk_level band — one number to gate signups or checkout on instead of stitching together the individual VPN/proxy/Tor/cloud flags yourself. Advanced adds the risk_factors that fed it. On Basic and above, reverse=true also resolves the hostname (PTR) for the address. The individual VPN, proxy, Tor, spam and cloud flags are free on every plan, including during the trial — see the field comparison.

Tagging & rate limits

Add a tag (max 20 characters) to single-address requests to segment your usage charts by campaign, product, or customer source. You can also enable Rate Limit by IP Address on a key from the API Keys page to throttle abusive callers to one request per five minutes. Track everything from your Statistics dashboard.